Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/eb80221f2be946749bcb4db103f5f927f0b8fb0a.roa
File: eb80221f2be946749bcb4db103f5f927f0b8fb0a.roa (raw, json)
Hash identifier: H/49SRZRYhAz2BUCBScaUF4XZXLdBoLgIS194v0CooU=
Subject key identifier: 21:35:F0:6D:4B:A1:18:17:35:B5:D9:0F:5A:3C:EE:A6:E0:2C:8E:9A
Certificate issuer: /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial: 083FA8
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/eb80221f2be946749bcb4db103f5f927f0b8fb0a.roa
Signing time: Tue 27 Feb 2024 00:40:58 +0000
ROA not before: Tue 27 Feb 2024 00:40:50 +0000
ROA not after: Tue 27 Feb 2029 00:40:50 +0000
asID: 6503
IP address blocks: 200.23.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 540584 (0x83fa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Validity
Not Before: Feb 27 00:40:50 2024 GMT
Not After : Feb 27 00:40:50 2029 GMT
Subject: CN=eb80221f2be946749bcb4db103f5f927f0b8fb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:49:61:98:3b:e6:20:a5:41:5f:8e:bb:8c:
24:c5:16:9f:24:0c:45:be:2d:a5:71:84:1a:a2:4b:
79:b2:b8:8e:97:23:02:1d:96:5b:c9:e9:8d:f3:eb:
b2:52:42:82:ae:d5:ad:fe:e3:ec:a3:7d:35:dc:d5:
cd:db:3f:b8:76:5b:78:e9:45:89:6c:15:32:13:e1:
b5:aa:da:46:c5:03:ed:8e:7c:60:6f:0b:36:bd:e2:
71:3b:9e:87:a0:3d:91:ff:02:12:5e:d1:da:8d:b8:
f0:14:51:cb:c8:2f:21:3d:3d:a4:d6:e4:38:34:95:
23:80:05:99:d2:0a:e8:86:14:61:d0:aa:6a:a1:7a:
f9:10:31:3d:6c:ee:2b:36:6b:2e:f2:32:5f:a5:03:
07:92:78:35:84:32:30:45:25:51:79:a5:9d:9a:05:
49:75:80:24:b4:a6:0d:4a:fb:c2:0a:30:d0:fd:c1:
89:86:ce:fd:6b:a4:54:62:6b:62:1c:db:db:77:6e:
e1:85:82:bf:b4:04:d5:b1:4e:11:fb:d6:d3:2d:2f:
b8:e5:4b:b3:aa:57:2f:f6:09:ba:19:c4:cf:e3:51:
45:de:0a:9c:a3:70:5c:93:fc:d1:a9:e2:bf:19:9e:
bd:78:c3:65:73:0e:1f:3b:4c:e3:bf:62:23:ea:40:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:F0:6D:4B:A1:18:17:35:B5:D9:0F:5A:3C:EE:A6:E0:2C:8E:9A
X509v3 Authority Key Identifier:
keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/eb80221f2be946749bcb4db103f5f927f0b8fb0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.147.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4a:3e:b0:86:54:da:de:de:7c:91:7b:7d:d1:40:5c:7d:71:
03:0e:1a:90:ae:52:f0:28:17:c5:32:7a:fe:e4:7c:34:61:44:
d4:f8:12:4a:69:e2:38:4f:c9:39:3c:16:3f:85:c7:9d:48:2b:
7b:51:ef:1e:51:13:14:7b:7c:30:52:22:5a:cb:a5:ad:71:67:
65:05:c6:55:8c:5c:37:20:9e:55:4c:cb:52:1d:5c:2b:09:cd:
a8:de:86:a4:de:b5:63:67:4a:0a:ed:2c:e4:8c:54:bc:60:c8:
35:9b:5c:df:72:6c:b9:e9:a7:7f:db:2d:d3:25:4e:c9:83:8f:
72:9a:4f:98:45:8b:c6:74:56:33:d4:82:29:1e:6a:d9:d4:7f:
3b:a1:fe:8c:95:f2:37:77:da:9d:cb:aa:49:bb:3b:06:4c:34:
5b:3b:c3:20:d6:1d:1b:15:08:36:50:c8:ce:b1:d5:61:9a:93:
96:0c:a6:15:36:17:37:e8:b4:cb:cc:0f:c1:43:da:2e:29:cf:
4b:0d:50:50:5d:cb:1e:ea:c2:8e:62:d0:1c:dc:3c:61:b2:a6:
1f:63:7e:a4:e0:2d:8f:f1:6e:54:87:a5:7c:10:f3:f8:6c:ec:
53:45:d5:64:8a:0b:ee:68:13:b0:90:17:7e:4c:8f:cb:16:a3:
4d:20:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:15:27 2024 by rpki-client on console-ams.rpki-client.org